Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LBOH-2P-N3ZxvRf8ZIyuytyBuJU.roa
File: LBOH-2P-N3ZxvRf8ZIyuytyBuJU.roa (raw, json)
Hash identifier: f40m1wcECedsYuWCHkJJDTuyPuDwMk+Rve5XDI0TRMY=
Subject key identifier: 2C:13:87:FB:63:FE:37:76:71:BD:17:FC:64:8C:AE:CA:DC:81:B8:95
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FE9D03635914F4730A9F716F1AFECBE26
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LBOH-2P-N3ZxvRf8ZIyuytyBuJU.roa
Signing time: Wed 05 Jun 2024 19:11:27 +0000
ROA not before: Wed 05 Jun 2024 19:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jun 2024 20:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e9:d0:36:35:91:4f:47:30:a9:f7:16:f1:af:ec:be:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 5 19:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c1387fb63fe377671bd17fc648caecadc81b895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:5f:78:a6:50:56:17:2d:c1:2e:4b:d9:9b:
73:bc:c3:75:2e:5f:06:e4:47:7a:dd:18:39:73:59:
b4:7b:c1:33:9b:8c:bc:66:72:c1:f3:de:a4:9a:d0:
f8:0c:1a:1f:a1:f2:1b:75:9d:df:be:4f:4d:9d:e8:
62:46:38:e8:57:19:61:f5:e1:b9:7c:15:1d:17:29:
23:f8:c8:5e:a8:01:85:e8:d6:3c:62:df:07:3c:f4:
cf:d4:52:80:e5:2e:4f:aa:dd:35:a8:da:ff:da:9b:
0a:19:c8:ad:e2:f5:2f:2f:1b:1c:80:16:76:dc:2d:
bd:ee:7e:25:5b:12:da:31:fc:5f:3c:5b:db:d6:dd:
79:cd:7d:af:1a:7c:31:fc:65:40:e6:ae:34:78:7e:
6b:ca:9a:3f:f5:64:9c:22:f0:6b:a4:91:e2:d3:9f:
2c:af:1f:76:45:bb:5c:41:8b:68:75:93:74:9b:25:
b1:8f:26:d2:04:5f:ff:a6:41:72:05:f7:21:fe:70:
8c:40:31:b7:0d:2d:fc:95:8e:84:e8:66:32:cd:7d:
73:1a:22:c6:be:f5:6f:5b:a3:4c:18:7c:4c:94:83:
e1:70:d5:59:1e:a2:d5:07:16:ed:8f:a7:de:2e:ac:
af:e9:4f:a6:62:98:d9:e8:9f:b4:2b:76:1e:9f:09:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:87:FB:63:FE:37:76:71:BD:17:FC:64:8C:AE:CA:DC:81:B8:95
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LBOH-2P-N3ZxvRf8ZIyuytyBuJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:52:23:32:f3:5a:0c:17:52:0d:b8:ba:2f:79:60:fb:53:5e:
36:5f:8b:7f:4c:60:99:43:5a:08:a5:dd:49:64:c5:4b:70:ea:
e1:53:2d:5a:fc:d9:84:32:36:a3:29:fd:52:6a:7d:a1:0f:44:
18:e1:0b:5d:33:18:f8:a4:dc:0d:73:72:8a:4f:0d:06:33:d1:
35:f8:82:44:24:96:03:0a:dd:74:28:18:5d:aa:1c:89:d1:67:
cd:ec:e2:54:d9:94:24:54:89:5e:a6:32:69:85:44:f0:00:91:
e9:51:87:4d:15:f0:93:09:98:ec:d2:37:b8:af:b9:a3:f6:34:
1a:18:f7:1e:99:1c:35:fe:45:d6:86:e6:18:e7:39:c7:de:9a:
25:a2:69:c5:5c:71:91:c5:06:b7:b5:c2:ea:33:e2:07:99:48:
43:cf:a6:f3:43:ed:c9:71:ab:5f:c0:4f:68:a6:f9:fe:db:3f:
a3:8c:06:a7:6c:91:45:3f:50:3b:a0:51:03:ea:e2:46:30:7b:
3c:01:ca:9e:18:9d:04:7e:21:28:8d:d1:2b:fb:c6:bc:6b:f2:
f9:d9:ed:cb:52:62:5f:5a:7b:05:43:b6:b8:33:b2:c1:6d:11:
e4:a0:1a:28:a1:10:a2:96:c2:80:ed:e4:ef:66:a8:a2:b5:df:
ee:6f:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:59 2025 by rpki-client